Read the docs
TI-2013-01598 Aliases CVE-2013-1813GHSA-gv44-p9m5-qjmr

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories…

Priority LOW 33CWE-264Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-264.

Summary

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.

Why it matters now

EPSS 0.00623 50th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 101

CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:t-mobile:tm-ac1900:3.0.0.4.376_3169:*:*:*:*:*:*:*3.0.0.4.376_3169VulnerableT-mobile
cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*up to 1.20.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.38:*:*:*:*:*:*:*0.38Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.39:*:*:*:*:*:*:*0.39Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.40:*:*:*:*:*:*:*0.40Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.41:*:*:*:*:*:*:*0.41Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.42:*:*:*:*:*:*:*0.42Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.43:*:*:*:*:*:*:*0.43Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.45:*:*:*:*:*:*:*0.45Vulnerablebusybox
  • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:t-mobile:tm-ac1900:3.0.0.4.376_3169:*:*:*:*:*:*:* Versions 3.0.0.4.376_3169 Vulnerable ·T-mobile
  • cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:* Versions up to 1.20.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.38:*:*:*:*:*:*:* Versions 0.38 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.39:*:*:*:*:*:*:* Versions 0.39 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.40:*:*:*:*:*:*:* Versions 0.40 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.41:*:*:*:*:*:*:* Versions 0.41 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.42:*:*:*:*:*:*:* Versions 0.42 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.43:*:*:*:*:*:*:* Versions 0.43 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.45:*:*:*:*:*:*:* Versions 0.45 Vulnerable ·busybox
Show 91 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:busybox:busybox:0.46:*:*:*:*:*:*:*0.46Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.47:*:*:*:*:*:*:*0.47Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.48:*:*:*:*:*:*:*0.48Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.49:*:*:*:*:*:*:*0.49Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.50:*:*:*:*:*:*:*0.50Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.51:*:*:*:*:*:*:*0.51Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.52:*:*:*:*:*:*:*0.52Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.60.0:*:*:*:*:*:*:*0.60.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.60.1:*:*:*:*:*:*:*0.60.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.60.2:*:*:*:*:*:*:*0.60.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.60.3:*:*:*:*:*:*:*0.60.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.60.4:*:*:*:*:*:*:*0.60.4Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.60.5:*:*:*:*:*:*:*0.60.5Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.00:*:*:*:*:*:*:*1.00Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.01:*:*:*:*:*:*:*1.01Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.1.0:*:*:*:*:*:*:*1.1.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.1.1:*:*:*:*:*:*:*1.1.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.1.2:*:*:*:*:*:*:*1.1.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.1.3:*:*:*:*:*:*:*1.1.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.2.0:*:*:*:*:*:*:*1.2.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.2.1:*:*:*:*:*:*:*1.2.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.2.2:*:*:*:*:*:*:*1.2.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.2.2.1:*:*:*:*:*:*:*1.2.2.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.3.0:*:*:*:*:*:*:*1.3.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.3.1:*:*:*:*:*:*:*1.3.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.3.2:*:*:*:*:*:*:*1.3.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.4.0:*:*:*:*:*:*:*1.4.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.4.1:*:*:*:*:*:*:*1.4.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.4.2:*:*:*:*:*:*:*1.4.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.5.0:*:*:*:*:*:*:*1.5.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.5.1:*:*:*:*:*:*:*1.5.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.6.0:*:*:*:*:*:*:*1.6.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.6.1:*:*:*:*:*:*:*1.6.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.7.0:*:*:*:*:*:*:*1.7.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.7.1:*:*:*:*:*:*:*1.7.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.7.2:*:*:*:*:*:*:*1.7.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.7.3:*:*:*:*:*:*:*1.7.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.8.0:*:*:*:*:*:*:*1.8.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.8.1:*:*:*:*:*:*:*1.8.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.8.2:*:*:*:*:*:*:*1.8.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.9.0:*:*:*:*:*:*:*1.9.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.9.1:*:*:*:*:*:*:*1.9.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.9.2:*:*:*:*:*:*:*1.9.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.10.0:*:*:*:*:*:*:*1.10.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.10.1:*:*:*:*:*:*:*1.10.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.10.2:*:*:*:*:*:*:*1.10.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.10.3:*:*:*:*:*:*:*1.10.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.10.4:*:*:*:*:*:*:*1.10.4Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.11.0:*:*:*:*:*:*:*1.11.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.11.1:*:*:*:*:*:*:*1.11.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.11.2:*:*:*:*:*:*:*1.11.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.11.3:*:*:*:*:*:*:*1.11.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.12.0:*:*:*:*:*:*:*1.12.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.12.1:*:*:*:*:*:*:*1.12.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.12.2:*:*:*:*:*:*:*1.12.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.12.3:*:*:*:*:*:*:*1.12.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.12.4:*:*:*:*:*:*:*1.12.4Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.13.0:*:*:*:*:*:*:*1.13.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.13.1:*:*:*:*:*:*:*1.13.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.13.2:*:*:*:*:*:*:*1.13.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.13.3:*:*:*:*:*:*:*1.13.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.13.4:*:*:*:*:*:*:*1.13.4Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.14.0:*:*:*:*:*:*:*1.14.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.14.1:*:*:*:*:*:*:*1.14.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.14.2:*:*:*:*:*:*:*1.14.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.14.3:*:*:*:*:*:*:*1.14.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.14.4:*:*:*:*:*:*:*1.14.4Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.15.0:*:*:*:*:*:*:*1.15.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.15.1:*:*:*:*:*:*:*1.15.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.15.2:*:*:*:*:*:*:*1.15.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.15.3:*:*:*:*:*:*:*1.15.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.16.0:*:*:*:*:*:*:*1.16.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.16.1:*:*:*:*:*:*:*1.16.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.16.2:*:*:*:*:*:*:*1.16.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.17.0:*:*:*:*:*:*:*1.17.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.17.1:*:*:*:*:*:*:*1.17.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.17.2:*:*:*:*:*:*:*1.17.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.17.3:*:*:*:*:*:*:*1.17.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.17.4:*:*:*:*:*:*:*1.17.4Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.18.0:*:*:*:*:*:*:*1.18.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.18.1:*:*:*:*:*:*:*1.18.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.18.2:*:*:*:*:*:*:*1.18.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.18.3:*:*:*:*:*:*:*1.18.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.18.4:*:*:*:*:*:*:*1.18.4Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.18.5:*:*:*:*:*:*:*1.18.5Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.19.0:*:*:*:*:*:*:*1.19.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.19.2:*:*:*:*:*:*:*1.19.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.19.3:*:*:*:*:*:*:*1.19.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.19.4:*:*:*:*:*:*:*1.19.4Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.20.0:*:*:*:*:*:*:*1.20.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.20.1:*:*:*:*:*:*:*1.20.1Vulnerablebusybox
  • cpe:2.3:a:busybox:busybox:0.46:*:*:*:*:*:*:* Versions 0.46 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.47:*:*:*:*:*:*:* Versions 0.47 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.48:*:*:*:*:*:*:* Versions 0.48 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.49:*:*:*:*:*:*:* Versions 0.49 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.50:*:*:*:*:*:*:* Versions 0.50 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.51:*:*:*:*:*:*:* Versions 0.51 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.52:*:*:*:*:*:*:* Versions 0.52 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.60.0:*:*:*:*:*:*:* Versions 0.60.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.60.1:*:*:*:*:*:*:* Versions 0.60.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.60.2:*:*:*:*:*:*:* Versions 0.60.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.60.3:*:*:*:*:*:*:* Versions 0.60.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.60.4:*:*:*:*:*:*:* Versions 0.60.4 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.60.5:*:*:*:*:*:*:* Versions 0.60.5 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.1.2:*:*:*:*:*:*:* Versions 1.1.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.1.3:*:*:*:*:*:*:* Versions 1.1.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.2.2.1:*:*:*:*:*:*:* Versions 1.2.2.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.3.1:*:*:*:*:*:*:* Versions 1.3.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.3.2:*:*:*:*:*:*:* Versions 1.3.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.5.1:*:*:*:*:*:*:* Versions 1.5.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.6.1:*:*:*:*:*:*:* Versions 1.6.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.7.0:*:*:*:*:*:*:* Versions 1.7.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.7.1:*:*:*:*:*:*:* Versions 1.7.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.7.2:*:*:*:*:*:*:* Versions 1.7.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.7.3:*:*:*:*:*:*:* Versions 1.7.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.8.0:*:*:*:*:*:*:* Versions 1.8.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.8.1:*:*:*:*:*:*:* Versions 1.8.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.8.2:*:*:*:*:*:*:* Versions 1.8.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.9.0:*:*:*:*:*:*:* Versions 1.9.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.9.1:*:*:*:*:*:*:* Versions 1.9.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.9.2:*:*:*:*:*:*:* Versions 1.9.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.10.0:*:*:*:*:*:*:* Versions 1.10.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.10.1:*:*:*:*:*:*:* Versions 1.10.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.10.2:*:*:*:*:*:*:* Versions 1.10.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.10.3:*:*:*:*:*:*:* Versions 1.10.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.10.4:*:*:*:*:*:*:* Versions 1.10.4 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.11.0:*:*:*:*:*:*:* Versions 1.11.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.11.1:*:*:*:*:*:*:* Versions 1.11.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.11.2:*:*:*:*:*:*:* Versions 1.11.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.11.3:*:*:*:*:*:*:* Versions 1.11.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.12.0:*:*:*:*:*:*:* Versions 1.12.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.12.1:*:*:*:*:*:*:* Versions 1.12.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.12.2:*:*:*:*:*:*:* Versions 1.12.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.12.3:*:*:*:*:*:*:* Versions 1.12.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.12.4:*:*:*:*:*:*:* Versions 1.12.4 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.13.0:*:*:*:*:*:*:* Versions 1.13.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.13.1:*:*:*:*:*:*:* Versions 1.13.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.13.2:*:*:*:*:*:*:* Versions 1.13.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.13.3:*:*:*:*:*:*:* Versions 1.13.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.13.4:*:*:*:*:*:*:* Versions 1.13.4 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.14.0:*:*:*:*:*:*:* Versions 1.14.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.14.2:*:*:*:*:*:*:* Versions 1.14.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.14.3:*:*:*:*:*:*:* Versions 1.14.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.14.4:*:*:*:*:*:*:* Versions 1.14.4 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.15.0:*:*:*:*:*:*:* Versions 1.15.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.15.3:*:*:*:*:*:*:* Versions 1.15.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.16.0:*:*:*:*:*:*:* Versions 1.16.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.16.1:*:*:*:*:*:*:* Versions 1.16.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.16.2:*:*:*:*:*:*:* Versions 1.16.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.17.0:*:*:*:*:*:*:* Versions 1.17.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.17.1:*:*:*:*:*:*:* Versions 1.17.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.17.2:*:*:*:*:*:*:* Versions 1.17.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.17.3:*:*:*:*:*:*:* Versions 1.17.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.17.4:*:*:*:*:*:*:* Versions 1.17.4 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.18.0:*:*:*:*:*:*:* Versions 1.18.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.18.1:*:*:*:*:*:*:* Versions 1.18.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.18.2:*:*:*:*:*:*:* Versions 1.18.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.18.3:*:*:*:*:*:*:* Versions 1.18.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.18.4:*:*:*:*:*:*:* Versions 1.18.4 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.18.5:*:*:*:*:*:*:* Versions 1.18.5 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.19.0:*:*:*:*:*:*:* Versions 1.19.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.19.2:*:*:*:*:*:*:* Versions 1.19.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.19.3:*:*:*:*:*:*:* Versions 1.19.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.19.4:*:*:*:*:*:*:* Versions 1.19.4 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.20.0:*:*:*:*:*:*:* Versions 1.20.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.20.1:*:*:*:*:*:*:* Versions 1.20.1 Vulnerable ·busybox

Remediation

Red Hat 1 advisory

  • RHSA-2013:1732 Released 2013-11-20 · Red Hat rating Low
    busybox security and bug fix update
    • Red Hat Enterprise Linux Desktop (v. 6) busybox-1:1.15.1-20.el6
    • Red Hat Enterprise Linux Desktop Optional (v. 6) busybox-1:1.15.1-20.el6, busybox-petitboot-1:1.15.1-20.el6
    • Red Hat Enterprise Linux HPC Node (v. 6) busybox-1:1.15.1-20.el6
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) busybox-1:1.15.1-20.el6, busybox-petitboot-1:1.15.1-20.el6
    • Red Hat Enterprise Linux Server (v. 6) busybox-1:1.15.1-20.el6
    • Red Hat Enterprise Linux Server Optional (v. 6) busybox-1:1.15.1-20.el6, busybox-petitboot-1:1.15.1-20.el6
    • Red Hat Enterprise Linux Workstation (v. 6) busybox-1:1.15.1-20.el6
    • Red Hat Enterprise Linux Workstation Optional (v. 6) busybox-1:1.15.1-20.el6, busybox-petitboot-1:1.15.1-20.el6

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2013:1732
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2013:1732
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2013:1732
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2013:1732
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2013:1732
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2013:1732
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2013:1732
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2013:1732
Not affected: 1 product
  • Red Hat Enterprise Linux 5

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-1813
  2. 2026-10-03 Alias added: GHSA-gv44-p9m5-qjmr
  3. 2026-11-04 EPSS moved to the 50th–90th percentile

References

Exploit 1

Advisory 1

Other 8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences